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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
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earned patent term adjustment. See 37 CFR 1 .704(b). 
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2a)D This action is FINAL. 2b)S This action is non-final. 
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6) KI Claim(s) 7-29 is/are rejected. 
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application from the International Bureau (PCT Rule 17.2(a)). 
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DETAILED ACTION 

1. Claims 1-29 have been examined. 



Specification 

2. The disclosure is objected to because of the following informalities: the term 
"cyphertext" should be changed to "ciphertext". Appropriate correction is required. 



Claim Objections 

3. Claims 1-29 are objected to because of the following informalities: the term 
"cyphertext" should be changed to "ciphertext". Appropriate correction is required. 



Claim Rejections - 35 USC § 102 

4. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

5. Claims 1-29 are rejected under 35 U.S.C. 102(b) as clearly anticipated by 
Crandall U.S. Pat. No. 5805703 (hereinafter Crandall). 

As per claim 1 , Crandall discloses a protocol for cryptographic communication 
via a communication channel "I" in which a sending cryptographic unit "S" transmits 
onto the communication channel I an encrypted ciphertext message "M" obtained by 
supplying both a plaintext message "P" and a cryptographic key "K" to a first 
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cryptographic device, and in which a receiving cryptographic unit "R" receives the 
ciphertext message M from the communication channel I and by supplying the ciphertext 
message M together with the key K to a second cryptographic device decrypts the 
plaintext message P therefrom (Crandall: summary: conventional cryptographic 
communication), a method by which the units S and R mutually establish a cryptographic 
key K by first exchanging messages before the sending unit S transmits the ciphertext 
message M comprising the steps of: 

a. the receiving unit R transmitting for storage in a publicly accessible repository 
a plurality of public quantities (Crandall: column 20 lines 15-24 and figure 12: store 
publicly known information); 

b. the sending unit S: 

i. retrieving the plurality of public quantities from the publicly accessible 
repository (Crandall: column 13 lines 18-30 and figure 12: the sender uses public 
storage information to generate key); 

ii. using at least some of the plurality of public quantities, computing and 
transmitting to the receiving unit R a plurality of sender's quantities (Crandall: 
column 19: lines 42-48: plurality of sender's quantities are ciphertext message 
and signature); and 

iii. using at least one of the plurality of public quantities, computing the 
key K (Crandall: column 13 lines 18-30); and c. the receiving unit R, using at 
least one of the plurality of sender's quantities received from the sending unit S 
computing the key K (Crandall: figure 12 and column 20 lines 42-52: the using 
sender's public key to compute deciphering key). 



Application/CofffFol Number: 09/655,229 ^ Page 4 

Art Unit: 2131 

As per claim 2 5 Crandall further discloses the method of claim 1 wherein the 
receiving unit R, in storing the plurality of public quantities into the publicly accessible 
repository (Crandall: column 20 lines 15-24: stores publicly known information): 

i. selects at least one receiver's secret quantity (Crandall: column 8 lines 16-20 
and figure 3: receiver's public key is produced by using its private key); 

ii. selects for storage in the publicly accessible repository as part of the plurality 
of public quantities at least one selected public quantity (Crandall: column 15 lines 28- 
33); and 

iii. using the receiver's secret quantity and the at least one selected public 
quantity, computes and stores in the publicly accessible repository as part of the plurality 
of public quantities a plurality of computed public quantities (Crandall: column 15 lines 
34-38 and column 8 lines 16-20). 

As per claim 3-5, Crandall further discloses the method of claim 2 wherein the • 
plurality of public quantities/computed public quantities/selected public quantity include 
a plurality of vectors (Crandall: column 20 lines 15-24: sender's and receiver's public 
keys and curve parameter.., etc. ; column 8 lines 8-42: how public keys are generated). 

As per claim 6, Crandall further discloses the method of claim 2 wherein the 
sending unit S, in computing the plurality of sender's quantities for transmission to the 
receiving unit R (Crandall: column 19 lines 42-48 and figure 12: ciphertext and signature 
are sent to the receiver): 

i. selects a sender's secret quantity (Crandall: column 13 lines 18-30: take the 
sender's private key); and 
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ii. using the sender's secret quantity and at least some of the retrieved plurality of 
public quantities, computes for transmission to the receiving unit R the plurality of 
sender's quantities (Crandall: column 13 lines 18-30: generate enciphering key to 
encipher the plaintext; column 19 lines 42-48 and figure 12: ciphertext and signature are 
sent to the receiver as plurality of quantities). 

As per claim 7, Crandall further discloses the method of claim 6 wherein the 
plurality of sender's quantities include a plurality of vectors (Crandall: column 19 lines 
42-48: the signature (u,P) is sent to the receiver; column 16 - column 17: two points on 
the curve; column 8 lines 35-36: form an abelian group). 

As per claim 8, Crandall further discloses the method of claim 1 wherein the 
sending unit S, in computing the plurality of sender's quantities for transmission to the 
receiving unit R (Crandall: column 19 lines 42-48 and figure 12: ciphertext and signature 
are sent to the receiver): 

i. selects a sender's secret quantity (Crandall: column 13 lines 18-30: take the 
sender's private key); and 

ii. using the sender's secret quantity and at least some of the retrieved plurality of 
public quantities, computes for transmission to the receiving unit "R" the plurality of 
sender's quantities (Crandall: column 13 lines 18-30: generate enciphering key to 
encipher the plaintext; column 19 lines 42-48 and figure 12: ciphertext and signature are 
sent to the receiver as plurality of quantities). 

As per claim 9, Crandall further discloses the method of claim 8 wherein the 
plurality of sender's quantities include a plurality of vectors (Crandall: column 19 lines 
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42-48: the signature (u,P) is sent to the receiver; column 16 - column 17: two points on 
the curve; column 8 lines 35-36: form an abelian group). 

As per claim 10 and 19, Crandall discloses a system adapted for communicating 
as an encrypted ciphertext message M a plaintext message P that has been encoded using 
a cryptographic key K, the system comprising: 

a. a communication channel I adapted for transmitting the ciphertext message M 
(Crandall: summary: conventional cryptographic communication); 

b. a pair of transceivers that are coupled to said communication channel I, and that 
are adapted for communicating the ciphertext message M from one transceiver to the 
other transceiver via said communication channel I (Crandall: summary: conventional 
cryptographic communication); and 

c. a pair of cryptographic: units each of which is respectively coupled to one of 
said transceivers for transmitting the ciphertext message M thereto or receiving the 
ciphertext message M therefrom (Crandall: summary: conventional cryptographic 
communication), each cryptographic unit: 

i. when the cryptographic unit is to receive the ciphertext message M: 

(1) storing plurality of public quantities in a publicly accessible 
repository (Crandall: column 20 lines 15-24 and figure 12: store publicly 
known information); 

(2) receiving via the communication channel I a plurality of 
sender's quantities from a sending cryptographic unit (Crandall: column 
19: lines 42-48 and figure 12: plurality of sender's quantities are 
ciphertext message and signature), and using at least one of the plurality of 
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sender's quantities in computing the key K (Crandall: column 13 lines 18- 
30); and 

ii. when the cryptographic unit is to send the ciphertext message M, 
retrieving the plurality of public quantities from the publicly accessible repository 
(Crandall: column 13 lines 18-30 and figure 12: the sender uses public storage 
information to generate key) and using: 

(1) at least some of the plurality of public quantities in computing 
the plurality of sender's quantities which the sending cryptographic unit 
transmits via the communication channel I to the receiving cryptographic 
unit (Crandall: column 19: lines 42-48: plurality of sender's quantities are 
ciphertext message and signature); and 

(2) at least one of the plurality of public quantities in computing 
the key K (Crandall: column 13 lines 18-30) ; and 

iii. including a cryptographic device having: 

(1) a key input port for receiving the key K from the cryptographic 
unit (Crandall: figure 12 and column 20 lines 25-41 : the cryptography 
device is provided the key); 

(2) a plaintext port (Crandall: figure 12 and column 20 lines 25-41: 
the cryptography device is provided key along with plaintext): 

(a) for accepting the plaintext message P for encryption 
into the ciphertext message M that is transmitted from the 
cryptographic device (Crandall: figure 12 and column 20 lines 25- 
41 : generate ciphertext and send it); and 
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(b) for delivering the plaintext message P obtained by 
decrypting the ciphertext message M received by the cryptographic 
device (Crandall: column 20 lines 42-52 and figure 12); and 
(3) a ciphertext port that is coupled to one of said transceivers: 

(a) for transmitting the ciphertext message M to such 
transceiver (Crandall: figure 12: the cryptography device sends the 
ciphertext), and 

(b) for receiving the ciphertext message M from such 
transceiver (Crandall: figure 12: the cryptography device receives 
the ciphertext). 

As per claim 11 and 20, Crandall further discloses the system of claims 10 and 19 
wherein said cryptographic unit which receives the ciphertext message M in storing the 
plurality of public quantities into the publicly accessible repository (Crandall: column 20 
lines 15-24: stores publicly known information): 

(a) selects at least one receiver's secret quantity (Crandall: column 8 lines 16-20 
and figure 3: receiver's public key is produced by using its private key); 

(b) selects for storage in the publicly accessible repository as part of the plurality 
of public quantities at least one selected public quantity (Crandall: column 15 lines 28- 
33); and 

(c) using the receiver's secret quantity and the at least one selected public 
quantity, computes and stores in the publicly accessible repository as part of the plurality 
of public quantities a plurality of computed public quantities (Crandall: column 15 lines 
34-38 and column 8 lines 16-20). 
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As per claim 12-14 and 21-23, Crandall further discloses the system of claims 1 1 
and 19 wherein the plurality of public quantities/computed public quantities/selected 
public quantity include a plurality of vectors (Crandall: column 20 lines 15-24: sender's 
and receiver's public keys and curve parameter.., etc. ; column 8 lines 8-42: how public 
keys are generated). 

As per claim 15 and 24, Crandall further discloses the system of claims 11 and 19 
wherein the sending unit S, in computing the plurality of sender's quantities for 
transmission to the receiving cryptographic unit (Crandall: column 19 lines 42-48 and 
figure 12: ciphertext and signature are sent to the receiver): 

i. selects a sender's secret quantity (Crandall: column 13 lines 18-30: take the 
sender's private key); and 

ii. using the sender's secret quantity and at least some of the retrieved plurality of 
public quantities, computes for transmission to the receiving unit R the plurality of 
sender's quantities (Crandall: column 13 lines 18-30: generate enciphering key to 
encipher the plaintext; column 19 lines 42-48 and figure 12: ciphertext and signature are 
sent to the receiver as plurality of quantities). 

As per claim 16 and 25, Crandall further discloses the system of claims 15 and 24 
wherein the plurality of sender's quantities include a plurality of vectors (Crandall: 
column 19 lines 42-48: the signature (u,P) is sent to the receiver; column 16 - column 17: 
two points on the curve; column 8 lines 35-36: form an abelian group). 

As per claim 17 and 26, Crandall further discloses the system of claims 10 and 19 
wherein the sending unit S, in computing the plurality of sender's quantities for 
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transmission to the receiving cryptographic unit (Crandall: column 19 lines 42-48 and 
figure 12: ciphertext and signature are sent to the receiver): 

i. selects a sender's secret quantity (Crandall: column 13 lines 18-30: take the 
sender's private key); and 

ii. using the sender's secret quantity and at least some of the retrieved plurality of 
public quantities, computes for transmission to the receiving cryptographic unit the 
plurality of sender's quantities (Crandall: column 13 lines 18-30: generate enciphering 
key to encipher the plaintext; column 19 lines 42-48 and figure 12: ciphertext and 
signature are sent to the receiver as plurality of quantities). 

As per claim 18 and 27, Crandall further discloses the system of claims 17 and 16 
wherein the plurality of sender's quantities include a plurality of vectors (Crandall: 
column 19 lines 42-48: the signature (u,P) is sent to the receiver; column 16 - column 17: 
two points on the curve; column 8 lines 35-36: form an abelian group). 

As per claim 28, Crandall discloses a protocol for communication in which a 
sending unit S transmits onto the communication channel I a message "M" together with 
a digital signature (Crandall: summary: communication channel; column 19 lines 42-48: 
send ciphertext and digital signature), and, wherein before transmitting the message M 
and the digital signature, the sending unit S transmits for storage in a publicly accessible 
repository a plurality of public quantities (Crandall: column 20 lines 15-24: store publicly 
known information), a method by which a receiving unit R that receives the message M 
and the digital signature verifies the authenticity of digital signature (Crandall: column 16 
lines 63-67: authenticate the digital signature) comprising the steps performed by the 
receiving unit R of: 
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a. retrieving the plurality of public quantities from the publicly accessible 
repository (Crandall: column 17 lines 1-50); 

b. using the digital signature and the plurality of public quantities, evaluating 
expressions of at least two (2) different verification relationships (Crandall: column 17 
lines 44-50: two different equations); and 

c. comparing pairs, of results obtained by evaluating the expressions of the at least 
two (2) different verification relationships (Crandall: column 17 lines 49-50: the digital 
signature is assumed authenticated when Q and R match). 

As per claim 29, Crandall further discloses the method of claim 28 wherein the 
plurality of public quantities include a plurality of vectors (Crandall: column 19 lines 42- 
48: the signature (u,P) is sent to the receiver; column 16 - column 17: two points on the 
curve; column 8 lines 35-36: form an abelian group). 



Conclusion 

6. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Crandall U.S. Pat. No. 6049610 discloses method and apparatus for digital 
signature authentication. 

Greenberg U.S. Pat. No. 5220606 discloses cryptographic system and method. 

Kruys U.S. Pat. No. 5555309 discloses cryptographic key management apparatus 
and methods. 

Matyas et al. U.S. Pat. No. 5073934 discloses method and apparatus for 
controlling the use of a public key, based on the level of import integrity for the key. 
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Any inquiry concerning this communication or earlier communications 
from the examiner should be directed to Shin-Hon Chen whose telephone number is 
(703) 305-8654. The examiner can normally be reached on Monday through Friday 
8:00am to 4:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (703) 305-9648. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 
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